$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/VSd5VMBEnUQHDxefBFJ4F4qMLA0.roa File: VSd5VMBEnUQHDxefBFJ4F4qMLA0.roa (raw, json) Hash identifier: KfamYkOxd8tQdMHzxMJ/UGl6bOC0HooJsB/fre/BaRA= Subject key identifier: 55:27:79:54:C0:44:9D:44:07:0F:17:9F:04:52:78:17:8A:8C:2C:0D Certificate issuer: /CN=D39A02AE150862D15FB727C511B104D63EFB4686 Certificate serial: 11F3 Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/VSd5VMBEnUQHDxefBFJ4F4qMLA0.roa Signing time: Mon 26 Aug 2024 05:18:46 +0000 ROA not before: Mon 26 Aug 2024 05:18:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131616 IP address blocks: 103.124.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4595 (0x11f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686 Validity Not Before: Aug 26 05:18:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=55277954C0449D44070F179F045278178A8C2C0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:7f:8f:fc:1b:81:c6:c9:47:3d:7f:b8:77: 56:eb:af:ef:aa:76:4f:bd:5f:8b:af:5c:6a:86:13: 06:d1:5d:20:5b:ae:25:f8:aa:f8:e7:6d:12:cd:4c: 47:47:c7:fd:76:a1:ee:ad:88:03:00:a7:9f:36:0d: 38:6a:13:1e:69:cc:5e:d4:d5:0e:fc:db:f1:33:5e: e4:76:c2:a5:1b:5c:73:f4:fe:29:28:14:77:02:ac: ad:66:3f:a4:75:0a:35:e9:ae:da:06:b2:af:a1:5b: e8:b4:d7:3f:ea:b8:50:fc:24:83:67:25:4c:94:29: 34:0b:42:85:6e:64:0a:33:14:52:72:cc:ee:5b:2a: e9:48:08:d9:79:4b:c1:ce:6a:e9:b0:71:57:6e:6e: ec:f0:98:b8:f7:2a:32:8c:bc:21:bb:5a:71:ad:b8: 9d:88:ee:fb:23:68:c7:b6:ee:97:63:22:71:9f:2a: 6c:9e:fe:9d:03:ce:49:fb:a7:87:5d:85:04:13:86: 39:9f:be:3b:81:61:4f:b2:65:cb:95:87:ff:36:02: 0e:bd:e5:df:fe:9f:d2:7f:82:80:00:fb:cc:43:0a: 9e:f5:77:f5:90:21:43:2e:15:b7:b3:2c:75:ff:ec: 87:3d:ba:1e:db:fd:f2:9b:af:4f:7f:6a:a8:7d:41: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:27:79:54:C0:44:9D:44:07:0F:17:9F:04:52:78:17:8A:8C:2C:0D X509v3 Authority Key Identifier: keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/VSd5VMBEnUQHDxefBFJ4F4qMLA0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.148.0/24 Signature Algorithm: sha256WithRSAEncryption b2:0a:c3:78:cf:7c:c7:64:b8:87:34:64:31:33:c3:81:64:26: 2c:bc:7a:ac:1f:73:74:5c:c6:b4:dd:6d:d9:8e:01:9e:fb:71: 39:8f:53:8d:ad:e4:3d:48:5f:d2:7c:b6:1e:c3:62:93:48:6e: a9:86:19:fa:dd:86:e3:3e:d1:41:ea:69:59:f5:f8:df:8c:af: c5:f3:cd:54:bb:62:32:d0:93:f1:0a:60:ca:c7:24:80:48:8b: 19:26:be:ae:c0:9d:63:24:b3:9a:94:f7:bd:77:e6:ad:f1:c2: 87:6d:cf:61:92:d7:82:fd:6f:62:af:c3:7d:27:b4:49:cc:cc: cf:ee:d8:39:92:21:4d:75:1f:e8:f5:e6:94:a2:0f:4a:37:b8: 7d:1b:d8:be:70:05:d6:06:fb:80:6e:b7:93:04:f4:c1:76:d3: 1a:bf:8d:7f:84:8c:51:56:86:04:4a:97:ff:e4:c0:d4:0c:fb: f3:b4:0d:19:a1:95:c3:1e:6b:bd:f2:fa:33:ae:86:5d:5f:d6: 4e:5b:f3:32:f4:74:73:4d:a1:44:f2:91:a4:fa:34:7b:78:e6: 5d:b5:5c:f3:d3:2d:c0:97:2c:c5:03:0c:4a:c6:25:ed:2a:fc: 77:56:a9:50:4a:40:67:2c:0a:43:72:57:f7:cf:1e:9c:0e:b7: 95:2e:2e:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICEfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDM5 QTAyQUUxNTA4NjJEMTVGQjcyN0M1MTFCMTA0RDYzRUZCNDY4NjAeFw0yNDA4MjYw NTE4NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1Mjc3OTU0QzA0NDlE NDQwNzBGMTc5RjA0NTI3ODE3OEE4QzJDMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ4X+P/BuBxslHPX+4d1brr++qdk+9X4uvXGqGEwbRXSBbriX4 qvjnbRLNTEdHx/12oe6tiAMAp582DThqEx5pzF7U1Q782/EzXuR2wqUbXHP0/iko FHcCrK1mP6R1CjXprtoGsq+hW+i01z/quFD8JINnJUyUKTQLQoVuZAozFFJyzO5b KulICNl5S8HOaumwcVdubuzwmLj3KjKMvCG7WnGtuJ2I7vsjaMe27pdjInGfKmye /p0Dzkn7p4ddhQQThjmfvjuBYU+yZcuVh/82Ag695d/+n9J/goAA+8xDCp71d/WQ IUMuFbezLHX/7Ic9uh7b/fKbr09/aqh9QdcXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVSd5VMBEnUQHDxefBFJ4F4qMLA0wHwYDVR0jBBgwFoAU05oCrhUIYtFftyfF EbEE1j77RoYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdBQ09N LzA1b0NyaFVJWXRGZnR5ZkZFYkVFMWo3N1JvWS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvMDVvQ3JoVUlZdEZmdHlmRkViRUUxajc3Um9ZLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdBQ09NL1ZTZDVWTUJFblVRSER4ZWZC Rko0RjRxTUxBMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn fJQwDQYJKoZIhvcNAQELBQADggEBALIKw3jPfMdkuIc0ZDEzw4FkJiy8eqwfc3Rc xrTdbdmOAZ77cTmPU42t5D1IX9J8th7DYpNIbqmGGfrdhuM+0UHqaVn1+N+Mr8Xz zVS7YjLQk/EKYMrHJIBIixkmvq7AnWMks5qU97135q3xwodtz2GS14L9b2Kvw30n tEnMzM/u2DmSIU11H+j15pSiD0o3uH0b2L5wBdYG+4But5ME9MF20xq/jX+EjFFW hgRKl//kwNQM+/O0DRmhlcMea73y+jOuhl1f1k5b8zL0dHNNoUTykaT6NHt45l21 XPPTLcCXLMUDDErGJe0q/HdWqVBKQGcsCkNyV/fPHpwOt5UuLsw= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:29 2024 by rpki-client on console-fra.rpki-client.org